vote-obex[.]xyz
“OBX-009: Rewards Allocation — OBEX Governance”
vote-obex.xyz — 内容不可用 (HTTP 502). 品牌冒充:Aave; 诈骗类型:Fake Airdrop. 证据摘要: VirusTotal 5/94 (alphaMountain.ai, CyRadar, Forcepoint ThreatSeeker, Gridinsoft, SOCRadar); 3 external blocklist matches (MetaMask, ScamSniffer, SEAL); PhishDestroy score 79/100. 注册商: PDR.
为保留原始取证记录,下方的 PhishDestroy AI 详细分析仍使用英文。
PhishDestroy identifies vote-obex.xyz as an active Voting Phishing page designed to trick visitors into surrendering personal or ballot information under the guise of an election-related survey. The domain mimics legitimate election portals, luring users with fake voting forms or registration prompts and exfiltrating entered data to attacker-controlled servers. Because the site is newly registered and remains undetected by security engines, it poses a heightened risk to anyone who clicks through from email, social media, or spoofed links. Immediate caution is advised for anyone who encounters this URL, especially during election seasons when urgency-based scams surge. This domain was flagged by PhishDestroy with zero detections on VirusTotal (5/95 engines) as of the latest scan. The domain vote-obex.xyz was created on March 25, 2026, and is registered through PDR Ltd. d/b/a PublicDomainRegistry.com. It resolves to IP address 104.21.17.17 and uses a valid Let’s Encrypt SSL certificate to appear trustworthy. The combination of a freshly minted domain, low detection rate, and election-themed lure strongly suggests a targeted phishing campaign aimed at harvesting voter data or credentials. If you visited vote-obex.xyz, stop entering any information immediately. Do not click links or download files from the site. Clear your browser cache and run a full antivirus scan. Report the domain to your email provider or cybersecurity team. Avoid interacting with any future messages referencing this site or similar URLs. Stay vigilant—new phishing domains like this one are constantly emerging and often bypass initial screening tools.
威胁响应 Pipeline
公共封禁名单状态
已保存的截图
域名情报
技术细节DNS、SSL SAN、时间戳
ICANN OVERSIGHT
认证和 RAA 背景
认证和 RAA 背景
Registrar accreditation and DNS abuse obligations
For this gTLD, the registrar above operates under an ICANN accreditation agreement. The links below provide the official fee schedule and current DNS abuse compliance guidance.
Accreditation is a contract, not a safety certification.
RAA §3.18 establishes abuse-contact and handling requirements. This report can document stored outbound notices and later technical observations; it does not by itself establish receipt, investigation, remediation, or contractual non-compliance.
取证情报
所用技术 · 3 identified
Performance monitoring tool that measures website speed from real users.
www.cloudflare.comWeb infrastructure and security company providing CDN, DDoS mitigation, and DNS services.
www.cloudflare.comThird major version of HTTP protocol, built on QUIC for faster, more reliable connections.
VirusTotal 分析
证据与外部报告
PD-20260326-1200DE Recipient: abuse@publicdomainregistry.com 您是否受到本网站的影响?
如果您输入了帐户凭据、个人或付款信息,或者从此域下载了文件,请立即采取措施。以下资源可帮助您报告事件并保护自己。